CVE-2026-34040

Description

Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows attackers to bypass authorization plugins (AuthZ). This issue has been patched in version 29.3.1.

References

https://thehackernews.com/2026/04/docker-cve-2026-34040-lets-attackers.html

https://github.com/moby/moby/security/advisories/GHSA-x744-4wpc-v9h2

https://github.com/moby/moby/releases/tag/docker-v29.3.1

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS